The vulnerability of the nfsd4decode_compound() function in the fs/nfsd/nfs4xdr.c module, which supports the Network File System in Linux kernels, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the xfs_trans_alloc_dir() function in the fs/xfs/xfs_trans.c module of the Linux file system support module allows a attacker to cause a service failure.

The vulnerability of the xfstransallocdir function in the fs/xfs/xfstrans.c module of the Linux file system support module is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the downgradeentrynext_c() function in the fs/bcachefs/sb-downgrade.c module, which is part of the bcachefs file system support for Linux kernels, allows a attacker to trigger a service failure.

The vulnerability of the downgradeentrynextc function in the fs/bcachefs/sb-downgrade.c module of the bcachefs file system support for Linux operating systems is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ntfs_fill_super() function in the fs/ntfs3/super.c module of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ntfsfillsuper function in the fs/ntfs3/super.c file of the NTFS file system in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

GO-2026-4816 NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs

NFS CSI driver for Kubernetes is Vulnerable to Path Traversal through Volume Identifier Parameter in github.com/kubernetes-csi/csi-driver-nfs...

CVE-2026-33531

CVE-2026-33531 affects InvenTree prior to 1.2.6. A path traversal vulnerability in the report template engine allows a staff-level user to read arbitrary server files via crafted template tags in report.py (encode_svg_image(), asset(), uploaded_image()). Exploitation requires staff access to uplo...

CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ESEVENTTYPEAUTHOPEN events. Seven additional file...

CVE-2026-33486

Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the server's local file system that the web...

CVE-2026-28892

A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system...

CVE-2026-28825

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. An app may be able to modify protected parts of the file system...

CVE-2026-25167

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2026-25175

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-23673

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-24290

Improper access control in Windows Projected File System allows an authorized attacker to elevate privileges locally...

SUSE-SU-2026:1081-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpicmpui bsc1254992. - CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply...

The vulnerability of the ubifs_write_end() function in the fs/ubifs/file.c module of the Linux file system support module allows a attacker to cause a service failure.

The vulnerability of the ubifswriteend function in the fs/ubifs/file.c module of the Linux file system support module is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fscache_perform_lookup() function in the fs/fscache/cookie.c module of the Linux kernel’s file system allows a hacker to cause a service failure.

The vulnerability of the fscacheperformlookup function in the fs/fscache/cookie.c module of the Linux kernel’s file system support module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `btrfs_clear_buffer_dirty()` function in the `fs/btrfs/extent_io.c` module of the btrfs file system support module in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the btrfsclearbufferdirty function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

The vulnerability of the btrfs_reduce_alloc_profile() function in the fs/btrfs/block-group.c file of the Linux kernel’s file system allows a attacker to cause a service failure.

The vulnerability of the btrfsreduceallocprofile function in the fs/btrfs/block-group.c file of the btrfs file system in the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause...

The vulnerability of the afs_getattr() function in the fs/afs/inode.c file of the Andrew File System kernel for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the afsgetattr function in the fs/afs/inode.c file of the Andrew File System kernel for Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...